The worst case attack and corresponding EER for each system is shown in columns 6 and 7 of Table REF . Here we see a distinct advantage of systems that operate upon raw inputs. The Res-TSSDNet [1]} and both Raw PC-DARTS systems have among the lowest worse case EERs. This observation indicates that the waveform based systems can capture discriminative artefacts that are missed by systems that use hand-crafted inputs. Were an adversary to discover the attacks to which a system is most vulnerable and exploit only attacks of this nature, then the Raw PC-DARTS countermeasures would offer the best protection among all competing systems.
